For Java GC logs, which deliever events in milisecond steps, we would like to build a dashboard with a graph where you can zoom in. Is there a possibility to add zooming functionality to a timechart? It should be similar to the zoom in/out possibilities in the standard search view.
This function is realy missing for a good monitoring tool...
I've found two libraries that could help : http://www.flotcharts.org/flot/examples/zooming/index.html http://www.fusioncharts.comhttp://www.highcharts.com/demo/line-time-series http://dygraphs.com/
I hope Splunk will integrate something similar very soon.
I'm working on the same things--zooming in on a flash timeline. I'm working right now in the advanced XML to do a custom drilldown. (Look for "custom drilldown" in Splunk's documentation.) There are a couple of answers here: http://docs.splunk.com/Documentation/Splunk/latest/Developer/TableChartDrilldown
If you find the answer first, let me know! :D
Drilldown from timechart to table 1 Answer
XML to Advanced XML and SIDEVIEW 1 Answer